CVE-2026-63001
1 advisory.
Packagist/redaxo/source CVE-2026-63001: medium 4.8
REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse()`
Action: Upgrade redaxo/source to 5.21.2 or later.
composer require redaxo/source:5.21.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.21.2 | - |
Fixed versions
| 5.21.2 |
Sources
- osv: GHSA-mf2p-wjp4-99pq
- https://github.com/redaxo/core/security/advisories/GHSA-mf2p-wjp4-99pq
- https://github.com/redaxo/core/pull/6581
- https://github.com/redaxo/core/commit/2daaa3a30570bc76a82f63fd21fb8c9c2cd5dc7c
- https://github.com/redaxo/core
- https://github.com/redaxo/core/releases/tag/5.21.2
CVE-2026-63001 · published · modified · JSON